Password-Protect My File

Security and privacy

file encryption

SHOW HN2014

8points
18comments
#2,003of 2,272 in 2014
Top 89%of 2014 by points

How HN took it

MixedNo clear lean

3 positive, 5 neutral or asking, 1 mixed, 4 critical, out of 13 comments about the project. Thread score -0.11.

Privacy: 2 for, 4 againstIdea: 1 for, 0 against

The thread, comment by comment

Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.

positive neutral or mixed critical about another commenter or something else the maker

What HN said

What people liked

  • Simple enough for non-technical users

    From 2 comments
    • Does it claim to be better? The main advantage I can see is simplicity, even non-technical users should be able to figure it out.
      dav- on HN
    • It's the same as using openssl aes-256-cbc -in plaintext -out ciphertext That's as easy and convenient as it can get for me. But it might be helpful if I have to send an…
      chrisxcross on HN
  • Self-contained HTML file works offline

    From 2 comments
    • It's all in one html file, so it will work disconnected from the internet. Download or save the page, turn off your internet, open it in a browser, and encrypt with peace of mind…
      sobel on HN
    • I really like this. Especially the self-contained html file you send around afterwards. You should recommend people to download the html and then save it instead of using the…
      herge on HN

Objections

  • Sensitive files passed through in-browser JavaScript could be exposed or the hosted code could change

    From 2 comments
    • If a user doesn't trust Dropbox, why would they trust passwordprotectmyfile.com? I know it claims the file doesn't leave your computer, and that might be true right now, but in…
      michaelt on HN
    • As soon as my file is readable by javascript it could be sent anywhere by your code. I'm not saying you do, but it could. Therefore this adds an unnecessary risk. I would have to…
      chrisfarms on HN
  • Trust in the hosted site is needed; self-hosting is not highlighted

    From 2 comments
    • Should really highlight the fact that it could be self-hosted [0]. Typing a password and uploading a sensitive file is never a good idea. [0] https://github.com/louissobel/ppmf
      rayshan on HN
    • At first sight it seems the encryption is done by client-side javascript, so you don't gain much by hosting it yourself.
      untitaker_ on HN

Requests

  • Recommend downloading the HTML file instead of using the page

    From 1 comment
    • I really like this. Especially the self-contained html file you send around afterwards. You should recommend people to download the html and then save it instead of using the…
      herge on HN
  • Remove Google Analytics from the self-contained version

    From 1 comment
    • I really like this. Especially the self-contained html file you send around afterwards. You should recommend people to download the html and then save it instead of using the…
      herge on HN

Questions

  • Does it work in any browser?

    From 1 comment
  • How is it better than symmetric GnuPG encryption?

    From 1 comment

Alternatives named

  • openssl aes-256-cbc

    From 1 comment
    • It's the same as using openssl aes-256-cbc -in plaintext -out ciphertext That's as easy and convenient as it can get for me. But it might be helpful if I have to send an…
      chrisxcross on HN
  • GnuPG symmetric encryption

    From 1 comment
  • Self-extracting WinZip archives

    From 1 comment
    • I'm reminded of those self-decrypting .exe archives that WinZip used to produce back in the day...
      cbhl on HN

Category, keywords, summaries and labels on this page were made by AI (Thread Reader v2) and not checked by hand. Each point links to the comments it came from.

Add a badge to your READMEShown on HackerShow
[![Shown on HackerShow](https://hackershow.org/badge.svg)](https://hackershow.org/show/7348562)